php-getid3 vulnerabilities (Ubuntu)

3 vulnerabilities.

• php-getid3 Ubuntu getID3 through 1.9.26 XML External Entity Injection via XML2array CVE-2026-94108 Fix available 8.3 HighSeptember 20, 2026
• php-getid3 Ubuntu getID3 before 1.9.26 OS Command Injection via Unescaped Filenames CVE-2026-94106 Fix available 8.7 HighSeptember 20, 2026
• php-getid3 Ubuntu Cross-site scripting in demos/demo.mysqli.php in getID3 CVE-2021-40926 Fix available 6.1 MediumOctober 1, 2021